Golom contest - pedr02b2's results

An NFT marketplace that offers the lowest industry fee, a publicly available order-book along with analytical tools.

General Information

Platform: Code4rena

Start Date: 26/07/2022

Pot Size: $75,000 USDC

Total HM: 29

Participants: 179

Period: 6 days

Judge: LSDan

Total Solo HM: 6

Id: 148

League: ETH

Golom

Findings Distribution

Researcher Performance

Rank: 134/179

Findings: 1

Award: $35.17

🌟 Selected for report: 0

🚀 Solo Findings: 0

Fix pragma version

Its is recommended to fix the pragma version to the version that the contract will be tested and deployed to mainet with before deployment

Files concerned

GolomToken.sol

Incomplete natspec

VoteEscrowDelegation.sol

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/vote-escrow/VoteEscrowDelegation.sol#L92

missing @param toTokenId missing @param nCheckPoints

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/vote-escrow/VoteEscrowDelegation.sol#L227

missing @param _from missing @param _to missing @param _tokenId missing @param _sender

RewardDistributor.sol

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/rewards/RewardDistributor.sol#L213

missing @return

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/rewards/RewardDistributor.sol#L252

missing @return reward

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/rewards/RewardDistributor.sol#L267

missing @return reward

Remove open comments, open ToDo's and unused/commented out functions before mainet deployment

File concerned

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/vote-escrow/VoteEscrowDelegation.sol#L218

Comments pointing to potential weakness's in code

VoteEscrowCore.sol

https://github.com/code-423n4/2022-07-golom/blob/e5efa8f9d6dda92a90b8b2c4902320acf0c26816/contracts/vote-escrow/VoteEscrowCore.sol#L103

Use of safeTransferFrom highlighted but not actually implemented, im assuming there is good reason for this but what also caught my attention is not only this, but comments such as this should be removed completely, although it is very well known that implementations of things such as safeTransferFrom should be used, it is probably not good practice to leave comments like this in the code, as it may point unsavoury characters to a possible weakness in said code, in this case it is quite innocent but something to bere in mind for any future projects the Dev may create, it is best to make a mental note of such things rather than highlite them in your code.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter